PT-2015-4555 · Red Hat · Redhat-Access-Plugin

Sara Perez Merino · Published 2015-03-10 · Updated 2023-02-13 · CVE-2015-0271

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Red Hat redhat-access-plugin versions prior to 6.0.3 for OpenStack Dashboard (horizon)

Description The issue allows remote attackers to read arbitrary files via a crafted path in the log-viewing function.

Recommendations For versions prior to 6.0.3, update to version 6.0.3 or later to resolve the issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2015-0271

RHSA-2015:0645

RHSA-2015:0840

RHSA-2015:0841

Affected Products

Redhat-Access-Plugin

References · 4

• http://rhn.redhat.com/errata/RHSA-2015-0841.html · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2015-0840.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-0271 · Security Note
• http://rhn.redhat.com/errata/RHSA-2015-0645.html · Vendor Advisory